I would suggest looking at the policy.sync.log on the client. You can also look at the proxyhost.log. They might have more information about why the connection isn't going through. It is also possible that something on your network is interfering with the connection - a firewall, caching appliance or something like that. Also, are they connecting on the network or off, through the CSA?